Remote Access Vulnerability in Sun Java Plug-In by Sun Microsystems
CVE-2003-1521

Currently unrated

Key Information:

Vendor

Oracle
Status
Java Plug-in
Vendor
CVE Published:
31 December 2003

What is CVE-2003-1521?

The Sun Java Plug-In versions 1.4 through 1.4.2_02 are vulnerable to a remote access flaw that allows attackers to exploit the createXmlDocument method in the org.apache.crimson.tree.XmlDocument class. This vulnerability permits unauthorized repeated access to the system's floppy drive, posing a significant violation of the Java security model. Attackers can leverage this flaw to create hardware stress on affected machines, potentially leading to broader system compromises.

References

http://www.securityfocus.com/bid/8867
vdb-entryx_refsource_BID
http://www.securityfocus.com/archive/1/341943
mailing-listx_refsource_BUGTRAQ

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.